PT-2021-17992 · Acexy · Acexy Wireless-N Wifi Repeater

Published 2021-03-29 · Updated 2021-04-02 · CVE-2021-28937

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Acexy Wireless-N WiFi Repeater REV 1.0 version 28.08.06.1

Description: The issue concerns the /password.html page of the Web management interface, which contains the administrator account password in plaintext. This page can be intercepted when accessed over HTTP.

Recommendations: For Acexy Wireless-N WiFi Repeater REV 1.0 version 28.08.06.1, consider disabling access to the /password.html page until a fix is available to prevent potential interception of the administrator account password. Restrict access to the Web management interface to minimize the risk of exploitation.

Exploit

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2021-28937

Affected Products

Acexy Wireless-N Wifi Repeater

References · 6

• 🔥 https://blog-ssh3ll.medium.com/acexy-wireless-n-wifi-repeater-vulnerabilities-8bd5d14a2990 · Exploit
• http://acexy.com · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-28937 · Security Note
• https://osv.dev/vulnerability/CVE-2021-28937 · Vendor Advisory
• https://t.me/cvenotify/12236 · Telegram Post
• https://t.me/cvenotify/12243 · Telegram Post